From: GAYNOR, RYAN C. (CD) (FBI) <RCGAYNOR@fbi.sgov.gov> 

Sent: Wednesday, October 19, 2016 10:15 AM 

To: WIERZBICKI, DANIEL S. (CG) (FBI) <DSWIERZBICKI@fbi.sgov.gov>; HEIDE, 
CURTIS A. (CG) (FBI) <CAHEIDE@fbi.sgov.gov>; SANDS, ALLISON (CG) (FBI) 
<ASANDS@fbi.sgov.gov> 

Ce: PIENTKA, JOE (WF) (FBI) <JPIENTKA@fbi.sgov.gov> 

Subject: RE: Online information --- 


Team CG, 


| have a few outstanding questions on my tracking list regarding the Trump domain/server in anticipation of future AD 
and higher briefs of the matter. 


1) On the information provided to the FBI ‘ anonymously’ on October 2, what has investigation found regarding 
the “Person of Interest” allegedly working at Alfa Bank with home IP address 91.205.144.46 and work IP 
217.12.97.137? 

2) Regarding the paper released on mediafire.com, has investigation found an explanation for the summary 
statement “deleted host name mail1.trump-email.com is replaced with trump 1.contact-client.com?” 

3) Do we have reason to believe Dave Degan (SP?) at Georgia Tech (my school) is the author of the original white 
paper that started this investigation? 


| apologize if you have answered any of these questions with me or others at HQ already and thanks for the help, 
-Ryan 


From: GAYNOR, RYAN C. (CD) (FBI) 
Sent: Thursday, October 13, 2016 5:45 PM 
To: WIERZBICKI, DANIEL S. (CG) (FBI); HEIDE, CURTIS A. (CG) (FBI); SANDS, ALLISON (CG) (FBI) 


Cc: PIENTKA, JOE (WF) (FBI); MOFFA, JONATHAN C. (CD) (FBI) 
Subject: FW: Online information --- 
Importance: High 


TRANSITORY RECORD 
Cis, 
| am interested on your thoughts on the attached paper. This was found online at the address noted at the top of the 


paper (mediafire.com). Looks like the argument in this paper is largely supported by activity likely caused by our 
investigation and other acts by Central Dynamics maybe Mandiant, but | would like your technical opinion 
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on this paper. Is this related to a. do we have information which can you help explain the ‘new’ trump email 
domain now pointed at the original server? 


As Always, Thank you for the great work on this, 
-Ryan 
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